CVE-2024-55073

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...

CVE-2024-55073

The self-hosted recipe manager hay-kot mealie v2.2.0 is affected by a Broken Object Level Authorization vulnerability (CWE-862) in the /api/users/{user-id} component. This flaw allows users to edit their own profiles to escalate privileges or modify their household. To mitigate risk, it is recomm...

CVE-2024-55073

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...